Track upstream microsandbox first-secret TLS activation bug

Summary

Track the temporary Right Agent workaround for superradcompany/microsandbox#1422.

microsandbox 0.6.10 persists the first secret added through modify().secret(...).restart().apply() but leaves TLS interception disabled. Provider placeholders then reach upstream APIs without substitution.

Production impact

This broke provider migration/rotation for agents whose sandbox was created before credentials were re-entered:

• TwitterAPI.IO returned authentication failures although the stored key was valid.
• FAL appeared unset after dashboard rotation.
• Sandbox inspection showed correct bindings and allowed hosts, but network.tls.enabled=false.

Live recovery confirmed:

• stored Twitter and FAL values matched operator-supplied files without exposing the values;
• TLS-enabled sandbox requests returned HTTP 200 for TwitterAPI.IO and FAL;
• the riskoff sandbox data fingerprint was preserved through the recovery cutover;
• riskoff-bot, MCP server, cloudflared, and Claude startup health were all healthy afterward.

Right Agent work

• Vendor microsandbox 0.6.10 with a minimal patch in apply_secret_patch_to_config() that enables TLS when the resulting secret set is non-empty.
• Keep dashboard rotation propagation and startup reconciliation tests.
• Add real-microVM regression coverage for:
  • first secret added to an existing TLS-disabled sandbox;
  • TLS enabled in durable and active config;
  • placeholder remains guest-visible;
  • HTTPS substitution reaches a local TLS fixture;
  • second independent provider binding;
  • live value rotation;
  • filesystem sentinel survives restart-backed changes.

Exit criteria

• Upstream releases a version containing the fix and equivalent regression coverage.
• Right Agent upgrades the pinned microsandbox version.
• Remove vendor/microsandbox and restore the registry dependency.
• Full workspace and live provider contract tests pass against upstream.

Start by reading upstream microsandbox issue #1422 and the local vendor/microsandbox work around apply_secret_patch_to_config(). Review the existing dashboard rotation propagation and startup reconciliation tests before assessing the requested real-microVM coverage. Done means the upstream fix and regression coverage are released, Right Agent upgrades its pinned dependency, vendor/microsandbox is removed, and the specified workspace and provider tests pass.